What is claimed is: 

si. A digital content protection system that enables a 

dVgital content to be used and includes a recording medium 

^ 3 apparatus having a storage area for holding digital content 

^4 information and an access apparatus that reads information 

5 from a^d writes information into the storage area, 

6 N^he digital content protection system operating 

7 according\to the following phases: 

8 an Nauthentication phase where the recording medium 

9 apparatus secretly transmits an inherent key to the access 

10 apparatus, and\the recording medium apparatus and the access 

11 apparatus perform mutual authentication using the inherent 

12 key, the inherent Key being information that is unique to the 

13 recording medium aj^aratus; and 

14. a content t.ras^sfer phase, performed only when the 

15 recording medium apparatus and the access apparatus have 

16 successfully authenticated each other, where the access 

17 apparatus either (a) encr^ts a digital content using the 

18 secretly transmitted inherervt key and sends the encrypted 

19 digital content to the recorciing medium apparatus or (b) 

20 receives an encrypted digital Nscontent from the recording 

21 medium apparatus and decrypts thes. encrypted digital content 

22 using the secretly transmitted inhe^rent key. 

1 2. The digital content protections, system of Claim 1, 

2 wherein the recording medium apparatus includes a 

3 first calculation means, and \ 
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the access apparatus includes a first authentication 
inforA^ation generating means and a first authentication 
means, 

lerein while the access apparatus judges whether the 
recordings, medium apparatus is legitimate in the 
authenticat iton phase, 

the fiVst authentication information generating means 
generates first\ authentication information and outputs the 
first authentication information to the recording medium 
apparatus , 

the first ^^lalculation means receives the first 
authentication information, generates first calculated 
authentication informatrion by performing a first calculation 
on the received first authentication information using the 
inherent key, and outputs fthe first calculated authentication 
information to the access apparatus, and 

the first authentica^on means judges whether the 
recording medium apparatus is\ legitimate from the first 
authentication information a\d the first calculated 
authentication information using N^he secretly transmitted 
inherent key. 
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3. The digital content protection Wstem of Claim 2, 

wherein the access apparatus \ncludes a second 

calculation means, and 

the recording medium apparatus incXudes a second 

authentication information generating means \nd a second 

authentication means. 
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wherein while the recording medium apparatus judges 
wPiether the access apparatus is legitimate in the 
authentication phase, 

the second authentication information generating 
means Venerates second authentication information and outputs 
the second authentication information to the access medium 
apparatus 

thh second calculation means receives the second 
authentication information, generates second calculated 
authenticatioii information by performing a second calculation 
on the receive^ second authentication information using the 
secretly transmJitted inherent key, and outputs the second 
calculated authen1r»^cation information to the recording medium 
apparatus, and 

the second a^lthentication means judges whether the 
access apparatus is legitimate from the second authentication 
information and the Second calculated authentication 
information using the inherent key. 



1 4, The digital content protection system of Claim 3, 

2 wherein the recordin^g medium apparatus further 

3 includes a first encryption means\and an inherent key storing 

4 means for prestoring the inherent\key, and 

5 the access apparatus fur\her includes a first 

6 decryption means, 

7 wherein while the recording mediVn apparatus secretly 

8 transmits the inherent key to the acces\ apparatus in the 

9 authentication phase. 
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\ the first encryption means generates an encrypted 

inhWent key by applying a first encryption algorithm to the 
inheVent key and outputs the encrypted inherent key to the 
accesk apparatus, and 

Vthe first decryption means receives the encrypted 
inherentX key and generates a decrypted inherent key by 
applying \a first decryption algorithm to the encrypted 
inherent k^, the first decryption algorithm being used to 
decrypt cipH^r text generated with the first encryption 
algorithm. \ 

5. The digital content protection system of Claim 4, 
wherein ^e recording medium apparatus further 

includes a first ke^ storing means for prestoring a first 
key, and \ 

the access apparatus further includes a second key 
storing means for prestoring a second key that corresponds to 
the first key, \ 

wherein the first \encryption means encrypts the 
inherent key using the first \key, and 

the first decryption Aeans decrypts the encrypted 
inherent key using the second keV- 

6. The digital content protect J^n system of Claim 5, 
wherein the first key and theWcond key are the same 

master key, and \. 

the first decryption means decisypts the encrypted 
inherent key using the second key that ife the same as the 
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^irst key. 

7. \ The digital content protection system of Claim 5, 

\ wherein the first key is a public key that is 
calculated from the second key according to a public key 
determiixation algorithm of a public key cryptosystem^ 

tKe first encryption algorithm is an encryption 
algorithm dif the public key cryptosystem, and 

the \first decryption algorithm is a decryption 
algorithm of lihe public key cryptosystem, 

whereinX the first encryption means encrypts the 
inherent key according to the encryption algorithm of the 
public key cryptofeystem using the first key that is the 
public key, and \. 

the first deoryption means decrypts the encrypted 
inherent key accordingXto the decryption algorithm of the 
public key cryptosystem \sing the second key. 

8. The digital content protection system of Claim 5, 
wherein the second l^y is a public key that is 

calculated from the first keyv according to a public key 
determination algorithm of a recovery signature processing 
method, \ 

the first encryption algorithm is a signature 
processing algorithm of the recovery, signature processing 
method, \ 

the first encryption means geneMtes the encrypted 
inherent key that is a signature text by Applying the first 
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encryption algorithm to the inherent key using the first 
keyX 

\ the first decryption algorithm is a verification 
processing algorithm of the recovery signature processing 
method, 

tWe first decryption means generates the decrypted 
inherent by applying the first decryption algorithm to 

the encrypteoi inherent key that is the signature text using 
the second keys- 

9. The digitVl content protection system of Claim 4, 

wherein tW recording medium apparatus further 

includes: \ 

a first masteV key storing means for prestoring a 

first master key group Vhat includes a plurality of master 

keys; and \ 

a first selection Veans for selecting a master key 

out of the first master keyXgroup as a first key, and 
the access apparatus mirther includes: 
a second master key stXring means for prestoring a 

second master key group that inc\udes a plurality of master 

keys, the first master key group \nd the second master key 

group include the same plurality ofVnaster keys; and 

a second selection means for ^electing a master key 

out of the second master key group ass a second key, the 

second key being the same as the first key, 

wherein the first encryption means encrypts the 

inherent key using the master key selected Xs the first key. 
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the first decryption means decrypts the encrypted 
inherent key using the master key selected as the second 
key. \ 

10. yrhe digital content protection system of Claim 4, 
wherein the first encryption means prestores a first 

subgroup ft^y, generates a transformed key by performing a 
first converssion on the inherent key using the first subgroup 
key, and geneVates the encrypted inherent key by applying the 
first encryption algorithm to the transformed key, and 

the f i£\st decryption means prestores a second 
subgroup key tha\: is the same as the first subgroup key, 
generates a decrypVed transformed key by applying the first 
decryption algorithm to the encrypted inherent key, and 
generates : the decrypted inherent key by performing an 
inversion operation of Nthe first conversion operation on the 
decrypted transformed keV using the second subgroup key. 

11. The digital contentNprotection system of Claim 4, 
wherein the first encryption means prestores a first 

subgroup key, generates a cipher text by applying the first 
encryption algorithm to the inhWent key, and generates the 
encrypted inherent key by perfWming a first conversion 
operation on the cipher text usin^ the first subgroup key, 
and \ 

the first decryption meansX prestores a second 
subgroup key that is the same as the\f irst subgroup key. 
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aenerates a decryption text by performing an inverse 
operation of the first conversion operation on the encrypted 
inherent key using the second subgroup key, and generates the 
decrypted inherent key by applying the first decryption 
algorithm to the decryption text. 

12. The^ digital content protection system of Claim 4, 

wheryein the recording medium apparatus further 
includes a fi^t key storing means for prestoring a first key 
that is a mastar key, and 

the acce^Bs apparatus further includes a second key 
storing means f orVprestoring a second key that is the same 
master key as the f\rst key, 

wherein the fjSrst encryption means prestores a first 
subgroup key, generatesXan encrypted first key by performing 
a first conversion operatYon on the first key using the first 
subgroup key, and generates the encrypted inherent key by 
applying the first encryptiVi algorithm to the inherent key 
using the encrypted first keA and 

the first decryptionN. means prestores a second 
subgroup key that is the same as the first subgroup key, 
generates an encrypted second ke\ by performing a second 
conversion operation, which is tVe same as the first 
conversion operation, on the second Nkey using the second 
subgroup key, and generates the decrypted inherent key by 
applying the first decryption algorithmN. to the encrypted 
inherent key using the encrypted second keys. 
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The digital content protection system of Claim 3, 
wherein the first authentication means includes: 
a third calculation means for generating third 
calculated authentication information by performing a third 
calculation that is the same as the first calculation on the 
first Authentication information using the secretly 
transmittefi inherent key; and 

a tV-rst comparison means for judging whether the 
first calcul^ed authentication information matches the third 
calculated authentication information and, if so, determining 
that the recording medium apparatus is legitimate. 

14. The digitaA content protection system of Claim 13, 

wherein the \econd authentication means includes: 
a fourth calculation means for generating fourth 
calculated authenticatiVn information by performing a fourth 
calculation that is the sVme as the second calculation on the 
second authentication information using the inherent key; 
and 

a second comparison I^\eans for comparing the second 
calculated authentication information with the fourth 
calculated authentication information and judging, when the 
second calculated authentication information matches the 
fourth calculated authentication information, that the access 
apparatus is legitimate 



1 15. The digital content protection system of Claim 14, 

2 wherein the first calculation means, prestores a first 



139 



i^bgroup key, generates a transformed inherent key by 
peVforming a first conversion operation on the inherent key 
usif^g the subgroup key, and generates the first calculated 
authienticat ion information by performing the first 
calculation on the first authentication information using the 
transf o](jmed inherent key, and 

le third calculation means prestores a second 
subgroup key that is the same as the first subgroup key, 
generates aXdecrypted transformed inherent key by performing 
an inversionXoperation of the first conversion operation on 
the secretly tVansmitted inherent key using the subgroup key, 
and generates tH^ third calculated authentication information 
by performing a ^calculation that is the same as the first 
calculation on theNfirst authentication information using the 
decrypted transformed inherent key. 

16. The digital conVent protection system of Claim 14, 
wherein the fiSrst authentication information 

generating means generate^ a random number as the first 
authentication information, ^and 

the second authentication information generating 
means generates a random n\amber >as the second authentication 
information. 

17. The digital content protection! system of Claim 3, 
wherein the first calculation \s a first encryption 

algorithm, 

the first calculation means generates the first 
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ilculated authentication information by applying the first 
encryption algorithm to the first authentication information 
using the inherent key, and 

the first authentication means generates first 
decrypted authentication information by applying a first 
decrypti^on algorithm to the first calculated authentication 
information using the secretly transmitted inherent key, 
compares tn^ first authentication information with the first 
decrypted authentication information, and judges, when the 
first authent\cation information matches the first decrypted 
authenticatiom information, that the recording medium 
apparatus is legitimate, 

wherein tVe first decryption algorithm is used to 
decrypt a cipher te^xt generated using the first encryption 
algorithm. 
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1 18. The digital conl^ent protection system of Claim 17, 

2 wherein the seconoy^ calculation is a second encryption 

3 algorithm, 

4 the second calculation means generates the second 

5 calculated authentication information by applying the second 

6 encryption algorithm to the second authentication information 

7 using the secretly transmitted inherent key, and 

8 the second authentication means generates second 

9 decrypted authentication information by applying a second 

10 decryption algorithm to the second calculated authentication 

11 information using the inherent key, \ compares the second 

12 authentication information with theV second decrypted 
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\authentication information, and judges, when the second 
authentication information matches the second decrypted 
authentication information, that the access apparatus is 
legrtimate, 

\ wherein the second decryption algorithm is used to 
decrypb^a cipher text generated using the second encryption 
algorithija. 

\ 

V 

19. TheXdigital content protection system of Claim 18, 

wherein the first calculation means prestores a first 
subgroup key\ generates a transformed inherent key by 
performing a fiVst conversion on the inherent key using the 
first subgroup Vey, and generates the first calculated 
authentication inrbrmation by applying the first encryption 
algorithm to the fiis^t authentication information using the 
transformed inherent \ey, and 

the first authentication means prestores a second 
subgroup key that is th\ same as the first subgroup key, 
generates a decrypted tran^ormed inherent key by performing 
an inversion operation of\^^ the first conversion on the 
secretly transmitted inherent\key using the second subgroup 
key, and generates the fir^t decrypted authentication 
information by applying the firsA decryption algorithm to the 
first calculated authenticatioX information using the 
decrypted transformed inherent key\ 

20. The digital content protectioA^ system of Claim 18, 

wherein the first authentication information 
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3 \generating means generates a random number as the first 

4 authentication information, and 

5 \ the second authentication information generating 

6 meank generates a random number as the second authentiqation 

7 inf orimation , 
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21. TKe digital content protection system of Claim 3, 

wheVein the storage area holds digital content 
information Vthat is generated by applying an encryption 
algorithm to digital content using the inherent key, 

the recWding medium apparatus further includes an 
output means for Veading, when the recording medium apparatus 
and the access apparatus have successfully authenticated each 
other, the digital content information from the storage area 
and outputting the re\d digital content information to the 
access apparatus, and 

the access appara-bas that reads information from the 
storage area further incluoes: 

a content decryption Veans for receiving the digital 
content information from the recording medium apparatus and 
generating a decrypted digital content by applying a 
decryption algorithm to the digita\ content information using 
the secretly transmitted inherekt key, the decryption 
algorithm being used to decrypt a cipT^er text generated using 
the encryption algorithm; and 

a reproduction means for reproducing the decrypted 
digital content. 
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2^. The digital content protection system of Claim 3, 

\ wherein the access apparatus that writes information 

into the storage area further includes: 

\ a content obtaining means for obtaining a digital 

V content encryption means for generating digital 
content dNiformation by applying an encryption algorithm to 
the obtainigyl digital content using the secretly transmitted 
inherent keyX and outputting the digital content information 
to the recordiiig medium apparatus, 

wherein N:he storage area holds the outputted digital 
content inf ormat djon . 

23. The digital a;ontent protection system of Claim 1, 

wherein when t^e recording medium apparatus and the 
access apparatus hav^ successfully authenticated each 
other, \ 

in the content transfer phase, the access apparatus 
either \ 

(c) generates at leasN: one data block by dividing a 
digital content, generates a o^ata block key for each data 
block, generates at least onev encrypted data block by 
encrypting each data block usingVthe secretly transmitted 
inherent key and a data block keyVthat corresponds to the 
data block, and transfers each encrypted data block to the 
recording medium, or \ 

(d) receives at least one encryp\ed data block of an 
encrypted digital content from the \recording medium 
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ipparatus, generates a data block key for each data block, 
aixa generates at least one data block by decrypting each 
encVypted data block using the secretly transmitted inherent 
key arid a data block key that corresponds to the encrypted 
data b\(-Ock, 

/herein each data block has one of a logical length 
and a physical length, and 

each encrypted data block has one of a logical length 
and a physical length. 
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24. The digital content protection system of Claim 1, 

wherein v/hen the recording mediiim apparatus and the 
access apparatus \ have successfully authenticated each 
other, 

in the contentN^transf er phase, the access apparatus 

either 

(e) generates a Sile key for a file of a digital 
content, generates an encrypted file by encrypting the file 
using the secretly transmitted^ inherent key and the file key, 
and transfers the encrypted fi\e and information concerning 
the file key to the recording medium, or 

(f ) receives, from the recording medium apparatus, an 
encrypted file of an encryptecK digital content and 
information concerning a file key that corresponds to the 
encrypted file, generates a decrypted fXle by decrypting the 
encrypted file using the secretly transrfkitted inherent key 
and the information concerning the file ke^, and reproduces 
the decrypted file. 
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The digital content protection system of Claim 24, 
wherein when the recording medium apparatus and the 
acceks apparatus have successfully authenticated each 
other/ 

\in the content transfer phase, the access apparatus 

either 

(gN) generates a file key for a file of a digital 
content, g^erates an encrypted file by encrypting the file 
using the Aile key, generates an encrypted file key by 
encrypting the file key using the secretly transmitted 
inherent key, \ and transfers the encrypted file and the 
encrypted file key to the recording medium, or 

(h) recei^s, from the recording medi\am apparatus, an 
encrypted file and\an encrypted file key that corresponds to 
the encrypted file,\ generates a file key by decrypting the 
encrypted file key u\ing the secretly transmitted inherent 
key, generates a decrypted file by decrypting the encrypted 
file using the file key,\ and reproduces the decrypted file, 

26. The digital contentX protection system of Claim 24, 

wherein the recordir^g medium apparatus generates a 
seed from a current time and A^tputs the seed to the access 
apparatus, the seed being an\initial value of a random 
number, 

the access apparatus recei^^es the generated seed from 
the recording medium apparatus, gerfterates. the random number 
from the seed, and sets the random n\imber as a file key. 
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1 2y . The digital content protection system of Claim 24, 

2 \ wherein while the access apparatus judges whether the 

3 recV)rding medium apparatus is legitimate in the 

4 authentication phase, 

5 \ the access apparatus sends the first authentication 
T\ ^ 6 informaVion to the recording medium apparatus, 

k 7 t5;ie recording medium apparatus generates a seed from 

/ 8 a current Vime, generates a combination result by combining 

^ 9 the seed wi^ the first authentication information, generates 

^ 10 an encrypted \combination result by encrypting the combination 

11 result using \ the inherent key, and sends the encrypted 

ry 12 combination resuilt to the access apparatus, the seed being an 

13 initial value of\a random number, and 

^ 14 the acces^apparatus generates a decrypted seed and 

^ 15 first decrypted authentication information by decrypting the 

in 16 encrypted combination result using the secretly transmitted 

^ 17 inherent key, judgeSv whether the first authentication 

18 information matches tPae first decrypted authentication 

19 information, and, if so, determines that the recording medium 

20 apparatus is legitimate, and 

21 in the content transfer phase, the access apparatus 

22 generates the random number frVm the decrypted seed and sets 

23 the random number as a file keyV 

1 28. The digital content protecm.on system of Claim 1, 

2 wherein when the recording mediiom apparatus and the 

3 access apparatus have successf ullyy authenticated each 

147 \ 



otf^er, 

in the content transfer phase, the access apparatus 

eithe'i 

(i) receives a user key from an operator, generates 
a transformed key from the user key and the secretly 
transmitted inherent key, generates an encrypted digital 
content by (encrypting a digital content using the transformed 
key, and transfers the encrypted digital content to the 
recording medVum, or 

(j) receives an encrypted digital content from the 
recording mediumXapparatus, generates a transformed key from 
a user key inputted from an operator and the secretly 
transmitted inherent key, and generates a decrypted digital 
content by decrypting\the encrypted digital content using the 
transformed key, 

29. The digital content protection system of Claim 1, 

wherein when the recording medium apparatus and the 
access apparatus have successfully authenticated each 
other, 

in the content transfei^ phase, the access apparatus 

either 

(k) receives a user key f:^m an operator, generates 
a file key for a file of a digital content, generates a 
transformed key from the user key andVthe file key, generates 
an encrypted file by encrypting Vthe file using the 
transformed key, and transfers the enccrypted file and the 
transformed key to the recording medium,\or 
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(1) receives, from the recording mediiam apparatus, an 
encVypted file and a transformed key that corresponds to the 
encrypted file, receives a user key from an operator, 
generates a file key from the user key and the transformed 
key, generates a decrypted file by decrypting the encrypted 
^18 file usin^the file key, and reproduces the decrypted file. 
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30. The digital content protection system of Claim 1, 

whereiK while the recording medium apparatus judges 
whether the kccess apparatus is legitimate in the 
authentication pni^se, 

the recor\ling medium apparatus sends second 
authentication inforiaation to the access apparatus, 

the access affparatus generates encrypted second 
authentication information by encrypting the second 
authentication informatidui using a master key and sends the 
encrypted second authentic^ion information to the recording 
medium apparatus, and 

the recording medium Napparatus generates decrypted 
second authentication informatioti by decrypting the encrypted 
second authentication informatior\ using a master key, judges 
whether the second authenticatio]\ information matches the 
decrypted second authentication information, and, if so, 
determines that the access apparatuses legitimate. 
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31. The digital content protection \system of Claim 1 

further includes an encrypted inherent key generation 
apparatus, 
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wherein the digital content protection system further 
operates according to an encrypted inherent key setting phase 
where \he encrypted inherent key generation apparatus 
generates^ an encrypted inherent key by encrypting the 
inherent k^^y sent from the recording medium apparatus and 
sends the encrypted inherent key to the recording medium 
apparatus, aAd the recording medium apparatus holds the 
encrypted inherent key sent from the encrypted inherent key 
generation apparatus, 

wherein iV the authentication phase, the recording 
medium apparatus s^nds the encrypted inherent key to the 
access apparatus, ^nd the access apparatus generates a 
decrypted inherent ke\ by decrypting the encrypted inherent 
key secretly sent f roiA the recording medium apparatus and 
judges whether the recording medium apparatus is legitimate 
using the decrypted inherent key. 



1 32 . A recording medium aj^paratus that has a storage area 

2 for holding digital content Vnformation and is used in a 

3 digital content protection sysrem, 

4 wherein the digital content protection system enables 

5 a digital content to be used and further includes an access 

6 apparatus that reads information fr\m and writes information 

7 into the storage area, and 

8 the digital content protec\^ion system operates 

9 according to the following phases; 

10 an authentication phase where t^e recording medium 

11 apparatus secretly transmits an inherentXkey to the access 
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12 apparatus, and the recording medium apparatus and the access 

13 apparatus perform mutual authentication using the inherent 

14 key, tf^ inherent key being information that is unique to the 

15 recording medium apparatus; and 

16 aXcontent transfer phase, performed only when the 

17 recording rt^dium apparatus and the access apparatus have 
^18 successfullyX authenticated each other, where the access 

9 apparatus either (a) encrypts a digital content using the 

20 secretly transmitted inherent key and sends the encrypted 

21 digital content \o the recording medium apparatus or (b) 

22 receives an encrypted digital content from the recording 

23 medium apparatus andS. decrypts the encrypted digital content 

24 using the secretly trdsnsmitted inherent key. 

1 33. The recording medium apparatus of Claim 32, 

2 wherein the recordsing medium apparatus includes a 

3 first calculation means, anck 

4 the access apparatus :mcludes a first authentication 

5 information generating means \and a first authentication 

6 means, \ 

7 wherein while the access apparatus judges whether the 

8 recording medium apparatus dNs legitimate in the 

9 authentication phase, \ 

10 the first authentication informiation generating means 

11 generates first authentication informaMon and outputs the 

12 first authentication information to tha recording medium 

13 apparatus, \ 

14 the first calculation means recesives the first 
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authentication information, generates first calculated 
authentication information by performing a first calculation 
on uhe received first authentication information using the 
inherent key, and outputs the first calculated authentication 
informat:ion to the access apparatus, and 

■Qhe first authentication means judges whether the 
recordingX medium apparatus is legitimate from the first 
authentication information and the first calculated 
authentication information using the secretly transmitted 
inherent key. \ 

34. The recoriding medium apparatus of Claim 33, 

wherein tn^ access apparatus includes a second 
calculation means, and 

the recordings medium apparatus includes, a second 
authentication information generating means and a second 
authentication means, \ 

wherein while the \recording medium apparatus judges 
whether the access apparatus is legitimate in the 
authentication phase, \ 

the second authentication information generating 
means generates second authenticVtion information and outputs 
the second authentication infornmtion to the access medium 
apparatus, \ 

the second calculation mea^s receives the second 
authentication information, generates second calculated 
authentication information by performing, a second calculation 
on the received second authentication insformation using the 
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jcretly transmitted inherent key, and outputs the second 
ca\culated authentication information to the recording medium 
appai^atus, and 

the second authentication means judges whether the 
access ^paratus is legitimate from the second authentication 
information and the second calculated authentication 
information, using the inherent key. 



\ 



35. An access apparatus that reads information from and 

writes informatiSDn into a storage area of a recording medium 
apparatus and is\included in a digital content protection 
system, 

wherein the \storage area holds digital content 
information, 

the digital coi^tent protection system enables a 
digital content to be usedyand includes the recording medium 
apparatus and the access apparatus, 

wherein the digital content protection system 
operates according to the following phases: 

an authentication phase Vrhere the recording medium 
apparatus secretly transmits an inherent key to the access 
apparatus, and the recording mediumXapparatus and the access 
apparatus perform mutual authenticat\on using the inherent 
key, the inherent key being information Vhat is unique to the 
recording medium apparatus; and 

a content transfer phase, performed only when the 
recording medium apparatus and the acces\ apparatus have 
successfully authenticated each other, wh4re the access 
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ipparatus either (a) encrypts a digital content using the 
icretly transmitted inherent key and sends the encrypted 
digsital content to the recording medium apparatus or (b) 
receYves an encrypted digital content from the recording 
mediuni apparatus and decrypts the encrypted digital content 
using t^e secretly transmitted inherent key, 

36. Thh access apparatus of Claim 35, 

whe:nein the recording medium apparatus includes a 
first calculation means, and 

the aco^ess apparatus includes a first authentication 
information gen^prating means and a first authentication 
means, 

wherein whi^e the access apparatus judges whether the 
recording mediurtK apparatus is legitimate in the 
authentication phase,N 

the first authentication information generating means 
generates first authent\cation information and outputs the 
first authentication information to the recording medium 
apparatus, 

the first calculatXon means receives the first 
authentication information, \ generates first calculated 
authentication information by performing a first calculation 
on the received first authenticXtion information using the 
inherent key, and outputs the firsV calculated authentication 
information to the access apparatusi^, and 

the first authentication meams judges whether the 
recording medium apparatus is legit\mate from the first 
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aiithent ication information and the first calculated 
authentication information using the secretly transmitted 
inheVent key. 

37. \The access apparatus of Claim 36, 

Vherein the access apparatus includes a second 
calculation means, and 

thA recording medium apparatus includes a second 
authenticatron information generating means and a second 
authenticatioJi means, 

whereinV while the recording medium apparatus judges 
whether the ^cess apparatus is legitimate in the 
authentication phXse, 

the secondX authentication information generating 
means generates secortd authentication information and outputs 
the second authenticaVion information to the access medium 
apparatus, \ 

the second calcVlation means receives the second 
authentication informatiW, generates second calculated 
authentication information By performing a second calculation 
on the received second authentication information using the 
secretly transmitted inherentX key, and outputs the second 
calculated authentication information to the recording medium 
apparatus, and \ 

the second authentication Veans judges whether the 
access apparatus is legitimate from the second authentication 
information and the second calcinated authentication 
information using the inherent key. \ 
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38. \ An encrypted inherent key generating apparatus that 
is uked in a digital content protection system, 

\ wherein the digital content protection system that 
enables \a digital content to be used and includes a recording 
medium apparatus having a storage area for holding digital 
content information and an access apparatus that reads 
information \f rom and writes information into the storage 
area, \ 

the digsital content protection system operating 
according to the Vollowing phases: 

an encrypted inherent key setting phase where the 
encrypted inherent \ey generation apparatus generates an 
encrypted inherent ke\ by encrypting the inherent key sent 
from the recording medium apparatus and sends the encrypted 
inherent key to the recording medium apparatus, and the 
recording medium apparatus Voids the encrypted inherent key 
sent from the encrypted inherent key generation apparatus, 
wherein the inherent key is information that is unique to the 
recording medium apparatus; \ 

an authentication phase where the recording medium 
apparatus transmits the encrypted imierent key to the access 
apparatus, the access apparatus generates an decrypted 
inherent key by decrypting the enOyrypted inherent key 
transmitted from the recording medaSum apparatus, the 
recording medium apparatus judges whether the access 
apparatus is an authorized apparatus using Vhe inherent key, 
and the access apparatus judges whether the rsecording medium 
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\apparatus is an authorized apparatus using the decrypted 
^^herent key; and 

\ a content transfer phase, performed only when the 

rec\rding medium apparatus and the access apparatus have 
successfully authenticated each other, where the access 
apparaft^s either (a) encrypts a digital content using the 
decrypted inherent key and sends the encrypted digital 
content tdy the recording medium apparatus or (b) receives an 
encrypted dVital content from the recording medium apparatus 
and decrypt^ the encrypted digital content using the 
decrypted inhei^nt key. 

39. A digital d^ntent protection method used in a digital 

content protection \ystem that enables a digital content to 
be used and includes\a recording medium apparatus having a 
storage area for holdiXa digital content information and an 
access apparatus that ls;eads information from and writes 
information into the storage area, 

the digital content Vrotection method comprising: 
an authentication step where the recording medium 
apparatus secretly transmits a\ inherent key to the access 
apparatus, and the recording medaWi apparatus and the access 
apparatus perform mutual authentication using the inherent 
key, the inherent key being information that is unique to the 
recording medium apparatus; and \ 

a content transfer step, performed only when the 
recording medium apparatus and the ac\ess apparatus have 
successfully authenticated each other, Nwhere the access 
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17 apparatus either (a) encrypts a digital content using the 

18 secretly transmitted inherent key and sends the encrypted 

19 digital content to the recording medium apparatus or (b) 

20 receive^ an encrypted digital content from the recording 

21 medium apparatus and decrypts the encrypted digital content 

22 using the Secret ly transmitted inherent key. 

Jl 1/ 40. A digrtal content protection program that is recorded 

/ 2 on a computer-readable recording medium and is executed in a 

^ 3 digital content pxotection system, 

^ 4 wherein thes. digital content protection system enables 

^5 a digital content toVbe used and includes a recording medium 

ry 6 apparatus having a stWage area for holding digital content 
£ \ 

□ 7 information and an acco^ss apparatus that reads information 

8 from and writes information into the storage area, 
2 9 the digital contenV protection program comprising: 

^ 10 an authentication s^ep where the recording medium 

11 apparatus secretly transmitsXan inherent key to the access 

12 apparatus, and the recording medi\am apparatus and the access 

13 apparatus perform mutual authentication using the inherent 

14 key, the inherent key being infontmtion that is unique to the 

15 recording medium apparatus; and \ 

16 a content transfer step, performed only when the 

17 recording medium apparatus and the Vccess apparatus have 

18 successfully authenticated each othesy where the access 

19 apparatus either (a) encrypts a digital content using the 

20 secretly transmitted inherent key and s4jids the encrypted 

21 digital content to the recording medium ^apparatus or (b) 
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iceives an encrypted digital content from the recording 
medium apparatus and decrypts the encrypted digital content 
usir^g the secretly transmitted inherent key. 



41. \A computer digital signal that is sent via a 
communication channel and includes a digital content 
protectioi\ program used in a digital content protection 
system, \ 

whereXn the digital content protection system enables 
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a digital content to be used and includes a recording medium 
apparatus having a storage area for holding digital content 
information and %i access apparatus that reads information 
from and writes inlformation into the storage area, 

the digital fcontent protection program comprising: 
an authenticaVion step where the recording medium 
apparatus secretly transmits an inherent key to the access 
apparatus, and the recoroLLng medium apparatus and the access 
apparatus perform mutual Wthentication using the inherent 
key, the inherent key being Vnf ormation that is unique to the 
recording medium apparatus; and 

a content transfer st^ep, performed only when the 
recording medium apparatus andXthe access apparatus have 
successfully authenticated eachXother, where the access 
apparatus either (a) encrypts a d\gital content using the 
secretly transmitted inherent key ^d sends the encrypted 
digital content to the recording medium apparatus or (b) 
receives an encrypted digital contentXfrom the recording 
mediiim apparatus and decrypts the encrypted digital content 
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